Request for Information for Electronic Security System (ESS) for Naval Hospital Bremerton (NHB)

The Defense Health Agency Hcd West, under the Department of Defense, issued a Request for Information (RFI) under solicitation number HT941026N0067 to gather market research for the upgrade or replacement of the Electronic Security System (ESS) at Naval Hospital Bremerton in Washington. This non-personal services requirement seeks comprehensive solutions encompassing Video Surveillance Systems, Access Control Systems, and Intrusion Detection Systems, all of which must be fully integrated, tested, accredited, and delivered with full operational readiness. The solicitation is not a contract award notice but a sources-sought tool to inform future procurement decisions, and responses were due by 7:17:26 Pacific Time following multiple extensions from an initial June 24 deadline. Respondents must register in the System for Award Management (SAM), provide their Unique Entity ID and CAGE code, and submit responses via email in PDF format, limited to ten pages, including company details, relevant experience with similar projects, and market research pricing for the recommended course of action. The RFI also required information on teaming arrangements and subcontracting plans, particularly for cybersecurity accreditation, electrical work, and system programming. Compliance with stringent cybersecurity and data protection standards is mandatory, including implementation of NIST SP 800-171, adherence to the DoD Assessment Methodology, and alignment with Cybersecurity Maturity Model Certification (CMMC) requirements per DFARS clauses. Contractors must safeguard Controlled Unclassified Information (CUI), Personally Identifiable Information (PII), and Protected Health Information (PHI), ensuring cloud providers meet FedRAMP Moderate or High baselines as applicable. Systems must satisfy DISA STIGs and Nessus vulnerability scan thresholds, with all high and moderate severity vulnerabilities remediated per a Plan of Action and Milestones. Accreditation via the DoD Risk Management Framework and achieving Authority to Operate is required. The contractor must establish a Quality Control Plan within 7 days of contract award, and upon final acceptance, submit as-built drawings, user manuals, and maintenance procedures. Personnel working on the system must comply with DoD 8570.01-M, DoDM 6025.18, and DoDM 5200.02, and be processed through the DHA Personnel Security Office for Tier II non-critical sensitive positions. Site visits were scheduled for July 9 and 10, 2026, and all communications must be directed to